Exposed target path and access request data on todo GraphQL type

What does this MR do and why?

Related to the todo page migration to Vue: !147301

This MR exposes the todo target path and some other fields related to access requests on the todo GraphQL type.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

N.A.

How to set up and validate locally

1. Impersonate a user with todos
2. Using graphql-explorer, run the following query which should succeed and show the URLs for the todo items targets

   {
     currentUser {
       todos {
         nodes {
           targetUrl
         }
       }
     }
   }